Medium severity5.3NVD Advisory· Published Nov 21, 2025· Updated Apr 15, 2026
CVE-2025-11771
CVE-2025-11771
Description
The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'createSaleRecord' function in all versions up to, and including, 2.4.7. This makes it possible for unauthenticated attackers to manipulate presales counters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=2.4.7
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.